Privacy Policy
Last Updated: January 22, 2026
1. Data Ingestion and Telemetry
At ProofDeck, we utilize advanced heuristic algorithms to parse, sanitize, and ingest user telemetry data for the purposes of improving our asynchronous microservices architecture. All personally identifiable information (PII) is encrypted at rest using AES-256-GCM standards and in transit via TLS 1.3 protocols. We rigorously adhere to the principle of least privilege regarding data access, ensuring that only authenticated ephemeral processes within our Kubernetes clusters can interact with user shards.
2. Cookies and Local Storage Persistence
We employ JWT (JSON Web Tokens) for stateless authentication and store session identifiers in HttpOnly, Secure cookies to mitigate XSS (Cross-Site Scripting) vectors. LocalStorage is utilized solely for non-sensitive UI state persistence (e.g., theme preferences, sidebar collapse state). By navigating our platform, you consent to the serialization of such state vectors onto your local device's non-volatile memory.
3. Third-Party API Integrations
Our system interoperates with downstream payment gateways (e.g., Stripe, Paystack) via idempotent webhook events. We do not store raw PAN (Primary Account Number) data; instead, we rely on tokenized references returned by PCI-DSS Level 1 compliant processors. Your transactional metadata is aggregated for analytical heuristics but remains anonymized in our OLAP data warehouse.
4. GDPR and CCPA Compliance Framework
Pursuant to Article 17 of the GDPR (Right to Erasure), users may request the rigorous purging of their relational database entries. Our distributed ledger (if applicable in future iterations) ensures cryptographic immutability of issued certificates, which constitutes a legitimate interest exception under data retention statutes.